Application Note: Deploy a ProSecure UTM in a Multi SSID Multi VLAN network
Page 4
...new VLANs as the VLAN IP address). Changing the Default VLAN for a Port will be equivalent to the Default VLAN concept. Click on Add... Version 2.0 Change VLAN1 Profile name to create a new VLAN Repeat the same process for both VLAN 20 and VLAN 30 (for example a Netgear switch 802.1q capable. A port ...member of multiple VLANs will be instead be the equivalent of setting an 802.1q trunk port, as long as the default VLAN is the port the Access Point will connect to. (If required enable DHCP with the ...
...new VLANs as the VLAN IP address). Changing the Default VLAN for a Port will be equivalent to the Default VLAN concept. Click on Add... Version 2.0 Change VLAN1 Profile name to create a new VLAN Repeat the same process for both VLAN 20 and VLAN 30 (for example a Netgear switch 802.1q capable. A port ...member of multiple VLANs will be instead be the equivalent of setting an 802.1q trunk port, as long as the default VLAN is the port the Access Point will connect to. (If required enable DHCP with the ...
Application Note: Deploy a ProSecure UTM in a Multi SSID Multi VLAN network
Page 6
Further Notes Testing Testing can be performed by connecting a Wireless client to connect from. The unit will therefore be accessible using the IP address configured on the VLAN the managing device will be managed connecting to . Inter-VLAN routing will work between VLANs if the following ...will be managed, upon being configured, from a DHCP server or hard-code an IP address relevant to the VLAN the Wireless client will be connecting to a port in VLAN1 ,as VLAN 1 is the management VLAN for the Access Point (IP 192.168.1.235) Layer2/Layer3 switch The unit will be managed using 192.168...
Further Notes Testing Testing can be performed by connecting a Wireless client to connect from. The unit will therefore be accessible using the IP address configured on the VLAN the managing device will be managed connecting to . Inter-VLAN routing will work between VLANs if the following ...will be managed, upon being configured, from a DHCP server or hard-code an IP address relevant to the VLAN the Wireless client will be connecting to a port in VLAN1 ,as VLAN 1 is the management VLAN for the Access Point (IP 192.168.1.235) Layer2/Layer3 switch The unit will be managed using 192.168...
Layer 2/Layer and WNDAP330 to host a multi-SSID and multi-VLAN network.
Page 7
... VLAN Version 1.0 Ensure the Wireless client obtains an IP address from the DGFV338 DHCP server and be performed by connecting a Wireless client to each of the SSID alternatively (i.e. In this scenario, when connecting to VLAN2, the Wireless client should also be able to access the Internet Managing devices DGFV338 ...The unit will be managed, upon being configured, from a device (wired or wireless) connected to a port in VLAN1 on the Layer2/Layer3 switch as this is the management VLAN for the Access Point Layer2/Layer3 switch The unit will be managed connecting to a port in the...
... VLAN Version 1.0 Ensure the Wireless client obtains an IP address from the DGFV338 DHCP server and be performed by connecting a Wireless client to each of the SSID alternatively (i.e. In this scenario, when connecting to VLAN2, the Wireless client should also be able to access the Internet Managing devices DGFV338 ...The unit will be managed, upon being configured, from a device (wired or wireless) connected to a port in VLAN1 on the Layer2/Layer3 switch as this is the management VLAN for the Access Point Layer2/Layer3 switch The unit will be managed connecting to a port in the...
WNDAP350 User Manual
Page 7
Contents ProSafe Dual Band Wireless-N WNDAP350 Reference Manual About This Manual Chapter 1 Introduction About the ProSafe Dual Band Wireless-N Access Point WNDAP350 1-1 Key Features and Standards 1-1 Compatible and Related NETGEAR Products 1-5 System Requirements ...1-6 What's In the Box? ...1-6 Hardware Description ...1-7 Chapter 2 Basic Installation and Configuration Wireless Equipment Placement and Range Guidelines 2-2 Understanding WNDAP350 Wireless Security Options 2-3 Installing the WNDAP350 wirelss access point 2-4 Logging In Using the Default IP Address 2-12 Setting Basic IP ...
Contents ProSafe Dual Band Wireless-N WNDAP350 Reference Manual About This Manual Chapter 1 Introduction About the ProSafe Dual Band Wireless-N Access Point WNDAP350 1-1 Key Features and Standards 1-1 Compatible and Related NETGEAR Products 1-5 System Requirements ...1-6 What's In the Box? ...1-6 Hardware Description ...1-7 Chapter 2 Basic Installation and Configuration Wireless Equipment Placement and Range Guidelines 2-2 Understanding WNDAP350 Wireless Security Options 2-3 Installing the WNDAP350 wirelss access point 2-4 Logging In Using the Default IP Address 2-12 Setting Basic IP ...
WNDAP350 User Manual
Page 8
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring WPA-PSK and WPA2-PSK 2-42 Restricting Wireless Access by MAC Address 2-44 Chapter 3 Management Remote Management ...3-1 Remote Console ...3-3 Upgrading the Wireless Access Point Software 3-5 Configuration File ... Configuration IP Settings for Wireless Clients 4-1 Hotspot Settings ...4-3 Configuring Advanced Wireless Settings 4-4 Configuring Advanced QoS Settings 4-8 Enabling Wireless Bridging 4-10 Chapter 5 Troubleshooting and Debugging No lights are lit on the wireless access point 5-1 The Wireless LAN ...
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring WPA-PSK and WPA2-PSK 2-42 Restricting Wireless Access by MAC Address 2-44 Chapter 3 Management Remote Management ...3-1 Remote Console ...3-3 Upgrading the Wireless Access Point Software 3-5 Configuration File ... Configuration IP Settings for Wireless Clients 4-1 Hotspot Settings ...4-3 Configuring Advanced Wireless Settings 4-4 Configuring Advanced QoS Settings 4-8 Enabling Wireless Bridging 4-10 Chapter 5 Troubleshooting and Debugging No lights are lit on the wireless access point 5-1 The Wireless LAN ...
WNDAP350 User Manual
Page 11
...is used to highlight information of note may result in a malfunction or damage to install, configure and troubleshoot the ProSafe Dual Band Wireless-N Access Point WNDAP350. Tip: This format is used to highlight a procedure that will save time or resources. Conventions, Formats, and... italic Emphasis, books, CDs, file and server names, extensions User input, IP addresses, GUI screen text Command prompt, CLI text, code URL links • Formats. About This Manual The ProSafe™ Dual Band Wireless-N Access Point WNDAP350 Reference Manual describes how to the equipment.
...is used to highlight information of note may result in a malfunction or damage to install, configure and troubleshoot the ProSafe Dual Band Wireless-N Access Point WNDAP350. Tip: This format is used to highlight a procedure that will save time or resources. Conventions, Formats, and... italic Emphasis, books, CDs, file and server names, extensions User input, IP addresses, GUI screen text Command prompt, CLI text, code URL links • Formats. About This Manual The ProSafe™ Dual Band Wireless-N Access Point WNDAP350 Reference Manual describes how to the equipment.
WNDAP350 User Manual
Page 14
... management. • 802.1Q VLAN (Virtual LAN) Support. The Basic Service Set Identifier (BSSID) is connected to each SSID. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Supported Standards and Conventions The following features: • Dual Band Concurrent. Supports multiple ...wireless access point is a unique identifier attached to you to configure up to PCs and other devices upon request. it is reflected in both the 2.4 GHz band and the 5 GHz band concurrently. VLANs are supported: • Standards Compliance. DHCP provides a dynamic IP address...
... management. • 802.1Q VLAN (Virtual LAN) Support. The Basic Service Set Identifier (BSSID) is connected to each SSID. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Supported Standards and Conventions The following features: • Dual Band Concurrent. Supports multiple ...wireless access point is a unique identifier attached to you to configure up to PCs and other devices upon request. it is reflected in both the 2.4 GHz band and the 5 GHz band concurrently. VLANs are supported: • Standards Compliance. DHCP provides a dynamic IP address...
WNDAP350 User Manual
Page 21
... Basic Wireless Connectivity 8. "Setting up your ProSafe Dual Band Wireless-N Access Point WNDAP350for wireless connectivity to your network from unauthorized access. "Configuring WPA with 802.11b/g/n or 802.11a/n wireless adapters to do such things as connect to your network. The WNDAP350 wirelss access point provides highly effective security features which are covered in detail in "Understanding Security Profiles" on your LAN. "Setting Basic IP Options...
... Basic Wireless Connectivity 8. "Setting up your ProSafe Dual Band Wireless-N Access Point WNDAP350for wireless connectivity to your network from unauthorized access. "Configuring WPA with 802.11b/g/n or 802.11a/n wireless adapters to do such things as connect to your network. The WNDAP350 wirelss access point provides highly effective security features which are covered in detail in "Understanding Security Profiles" on your LAN. "Setting Basic IP Options...
WNDAP350 User Manual
Page 25
... LEDs should be logged out of the wireless access point after 5 minutes of no activity.) Basic Installation and Configuration 2-5 v1.1, November 2009 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 2. Configuring LAN and Wireless Access To configure the WNDAP350 Ethernet port for the password, both in the address field. Turn on . • The LAN light of the wireless access point is connected to the Internet, under...
... LEDs should be logged out of the wireless access point after 5 minutes of no activity.) Basic Installation and Configuration 2-5 v1.1, November 2009 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 2. Configuring LAN and Wireless Access To configure the WNDAP350 Ethernet port for the password, both in the address field. Turn on . • The LAN light of the wireless access point is connected to the Internet, under...
WNDAP350 User Manual
Page 28
... in Figure 2-6. 2-8 Basic Installation and Configuration v1.1, November 2009 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 10. Configuring Time Settings To configure your network. Figure 2-5 IP Settings 11. Under the Configuration tab, select System from the main menu, select Basic, and then select Time. Configure the IP Address settings appropriate for more information about how to configure the...
... in Figure 2-6. 2-8 Basic Installation and Configuration v1.1, November 2009 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 10. Configuring Time Settings To configure your network. Figure 2-5 IP Settings 11. Under the Configuration tab, select System from the main menu, select Basic, and then select Time. Configure the IP Address settings appropriate for more information about how to configure the...
WNDAP350 User Manual
Page 29
... is Disabled. - The Default is time-b.netgear.com. 3. From the pull-down menu, select the local time zone for your wireless access point from a list of the custom NTP server. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 2-6 Time zone and system... time related settings 2. Time Zone. NTP Client. Note: You must have a custom NTP server. Use Custom NTP Server. Enter the host name or the IP address...
... is Disabled. - The Default is time-b.netgear.com. 3. From the pull-down menu, select the local time zone for your wireless access point from a list of the custom NTP server. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 2-6 Time zone and system... time related settings 2. Time Zone. NTP Client. Note: You must have a custom NTP server. Use Custom NTP Server. Enter the host name or the IP address...
WNDAP350 User Manual
Page 31
... connect, see Chapter 5, "Troubleshooting and Debugging." Verifying Wireless Connectivity Using a computer with an 802.11b/bg/ng or 802.11a/na wireless adapter with the DHCP client disabled. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 1. Disconnect the WNDAP350 and position it where it a new IP address, enter the wireless access point name into your network. Note: By default, WNDAP350 is printed on your Web browser. The...
... connect, see Chapter 5, "Troubleshooting and Debugging." Verifying Wireless Connectivity Using a computer with an 802.11b/bg/ng or 802.11a/na wireless adapter with the DHCP client disabled. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 1. Disconnect the WNDAP350 and position it where it a new IP address, enter the wireless access point name into your network. Note: By default, WNDAP350 is printed on your Web browser. The...
WNDAP350 User Manual
Page 32
... with 192.168.0.x and a Subnet Mask of 255.255.255.0. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Logging In Using the Default IP Address After you are using the default IP Address: 1. Note: The computer you install the WNDAP350, log in to the wireless access point to the WNDAP350 should automatically find the WNDAP350 wirelss access point and display the home screen. 2-12 Basic Installation and Configuration...
... with 192.168.0.x and a Subnet Mask of 255.255.255.0. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Logging In Using the Default IP Address After you are using the default IP Address: 1. Note: The computer you install the WNDAP350, log in to the wireless access point to the WNDAP350 should automatically find the WNDAP350 wirelss access point and display the home screen. 2-12 Basic Installation and Configuration...
WNDAP350 User Manual
Page 33
... and Configuration v1.1, November 2009 2-13 Under Configuration, select IP, and then IP Settings. To configure the basic IP settings of your wireless access point.The default IP address is disabled. Figure 2-9 Basic IP options 2. Enter the IP Address of your wireless access point: 1. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Setting Basic IP Options The basic IP settings for your wireless access point are entered on the explanation of a more complex LAN network...
... and Configuration v1.1, November 2009 2-13 Under Configuration, select IP, and then IP Settings. To configure the basic IP settings of your wireless access point.The default IP address is disabled. Figure 2-9 Basic IP options 2. Enter the IP Address of your wireless access point: 1. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Setting Basic IP Options The basic IP settings for your wireless access point are entered on the explanation of a more complex LAN network...
WNDAP350 User Manual
Page 34
.... ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual - The Access Point will automatically calculate the subnet mask based on the IP address that the upstream link is active before allowing wirelessassociations.If you set this IP address as...802.11 b/bg/ng wireless access point: 2-14 Basic Installation and Configuration v1.1, November 2009 Primary DNS Servers. The WNDAP350 will use this box to enable the WNDAP350 to which the wireless access point is configured. 3. Click Apply to configure the wireless settings available in both the 802.11b/bg/ng and 802...
.... ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual - The Access Point will automatically calculate the subnet mask based on the IP address that the upstream link is active before allowing wirelessassociations.If you set this IP address as...802.11 b/bg/ng wireless access point: 2-14 Basic Installation and Configuration v1.1, November 2009 Primary DNS Servers. The WNDAP350 will use this box to enable the WNDAP350 to which the wireless access point is configured. 3. Click Apply to configure the wireless settings available in both the 802.11b/bg/ng and 802...
WNDAP350 User Manual
Page 43
... to obtain an IP address by DHCP from a wireless computer and you change the wireless settings of your computer to match the new settings. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Program the wireless adapter of your PCs to have the same SSID that they have basic wireless connectivity to the WNDAP350, you can configure up to eight unique 802.11b/bg/ng...
... to obtain an IP address by DHCP from a wireless computer and you change the wireless settings of your computer to match the new settings. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Program the wireless adapter of your PCs to have the same SSID that they have basic wireless connectivity to the WNDAP350, you can configure up to eight unique 802.11b/bg/ng...
WNDAP350 User Manual
Page 48
... v1.1, November 2009 Choose Shared Key for the primary and secondary RADIUS servers: Server Name/IP Address: Primary Secondary Port Shared Secret 802.11a/na Configuration For a new wireless network, print or copy this information. Be sure to set up to 32 alphanumeric characters.... are set to provide this form and fill in the wireless adapter card. All wireless nodes in the WNDAP350. • WEP Encryption Keys Circle one : Open System or Shared Key. Key WPA RADIUS Settings. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Key 3 Key 4 WPA-PSK (Preshared Key...
... v1.1, November 2009 Choose Shared Key for the primary and secondary RADIUS servers: Server Name/IP Address: Primary Secondary Port Shared Secret 802.11a/na Configuration For a new wireless network, print or copy this information. Be sure to set up to 32 alphanumeric characters.... are set to provide this form and fill in the wireless adapter card. All wireless nodes in the WNDAP350. • WEP Encryption Keys Circle one : Open System or Shared Key. Key WPA RADIUS Settings. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Key 3 Key 4 WPA-PSK (Preshared Key...
WNDAP350 User Manual
Page 49
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • WPA-PSK (Preshared Key) Record the ... and Configuration v1.1, November 2009 2-29 Configuring the RADIUS Server Settings You can be used with Legacy 802.1x, and can setup or modify the RADIUS Server settings to all profiles. The RADIUS Server Settings screen...the primary and secondary RADIUS servers: Server Name/IP Address: Primary Secondary Port Shared Secret Use the procedures described in to configure the WNDAP350. When using the default LAN address of http://192.168.0.237, user name admin...
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • WPA-PSK (Preshared Key) Record the ... and Configuration v1.1, November 2009 2-29 Configuring the RADIUS Server Settings You can be used with Legacy 802.1x, and can setup or modify the RADIUS Server settings to all profiles. The RADIUS Server Settings screen...the primary and secondary RADIUS servers: Server Name/IP Address: Primary Secondary Port Shared Secret Use the procedures described in to configure the WNDAP350. When using the default LAN address of http://192.168.0.237, user name admin...
WNDAP350 User Manual
Page 50
... for communication with the Primary RADIUS Server. You can also configure a Secondary RADIUS Server to use , if the Primary RADIUS Server fails. - IP Address. Port Number. The IP address of the RADIUS Server. - ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 2-14 RADIUS server settings 3. This is 1812. - Port Number. The default: 1813 2-30 Basic Installation and Configuration v1...
... for communication with the Primary RADIUS Server. You can also configure a Secondary RADIUS Server to use , if the Primary RADIUS Server fails. - IP Address. Port Number. The IP address of the RADIUS Server. - ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 2-14 RADIUS server settings 3. This is 1812. - Port Number. The default: 1813 2-30 Basic Installation and Configuration v1...
WNDAP350 User Manual
Page 67
... In Using the Default IP Address" on page 2-12. "Remote Management 2. "Configuration File Management 5. "Enabling Rogue AP Detection 13. "Viewing Rogue AP Statistics 14. "Upgrading the Wireless Access Point Software 4. "Restoring the WNDAP350 to the Factory Default Settings... Activity Log Information 9. "Viewing Available Wireless Station Statistics 12. "Changing the Administrator Password 7. "Packet Capture Remote Management Both the SNMP and Remote Console are enabled by default, which allows for remote management of your ProSafe Dual Band WirelessN Access Point WNDAP350.
... In Using the Default IP Address" on page 2-12. "Remote Management 2. "Configuration File Management 5. "Enabling Rogue AP Detection 13. "Viewing Rogue AP Statistics 14. "Upgrading the Wireless Access Point Software 4. "Restoring the WNDAP350 to the Factory Default Settings... Activity Log Information 9. "Viewing Available Wireless Station Statistics 12. "Changing the Administrator Password 7. "Packet Capture Remote Management Both the SNMP and Remote Console are enabled by default, which allows for remote management of your ProSafe Dual Band WirelessN Access Point WNDAP350.